“Building the Perfect Shadow War Defense Shield” (Oxford Club)

Sniffing out the cybersecurity pick from Steve McDonald -- "How to Profit From the $10-Trillion Cyber Defense Explosion"

By Travis Johnson, Stock Gumshoe, September 18, 2012

For our edutainment today we’re sniffing out the solution to the latest teaser ad from the Oxford Club — Steve McDonald, one of their analysts, spins a long story about cybersecurity that reminds us of several other past ditigal security teasers.

Not that there’s anything wrong with that — this is, by all accounts, one of the “great” growth industries — nations, companies and individuals are continuing to be targeted by everything from everyday spam to identity theft to actual cyber “break ins” and online theft of confidential or strategic information and malicious wounding attacks to take down systems. This much is pretty clear to anyone who’s paying attention or dependent on the internet or on computers to do their business — which is almost every one. So, naturally, there are plenty of investment pundits who are on the search for companies that are good plays on this theme.

As themes go, in fact, I’d say cybersecurity is lately right up there with 3D printing, the iPhone, and Ben Bernanke’s profligacy in inspiring rafts of teaser ads… and of course, the investor enthusiasm is real, too, not just conjured up out of news — so there have been some attention-getting expensive IPOs in this space, too, like the recent successful entree of Palo Alto Networks (PANW).

McDonald describes the cybersecurity companies as being the next wave of defense contractors, with their profits likely to bloom as this cyber-war continues to grow — just like past defense contractors have profited from all the other wars our country has been involved in, both cold and hot. So that’s the basic idea, though obviously governments are far from being the only — or even the primary — customers of most cybersecurity companies.

But which particular company is he pitching? Well, I think we’re going to have to read between the lines a bit for this one. Here’s a taste of the ad:

“… a breakthrough in this war – like the airplane in WWI, or the atomic bomb in WWII – would be worth a lot of money.

“In fact, one relatively unknown company is set to deliver just such a breakthrough for the United States.

“Once you grasp how important this is to the financial future of our nation, you’ll see the enormity of the opportunity here.

“Frankly, the more you discover about this situation, the more you’ll come to realize this very well could be…

“The number one threat facing our nation today.”

He then goes on for quite a while in talking about “botnets” — these are the computer equivalent of zombie armies, computers that are compromised (usually by spam links clicked on by folks who don’t have current security software involved) and are then used, without the computer’s legitimate owner ever even knowing, to coordinate attacks on other targets. Often these are brute force distributed denial of service attacks, where the zombies just overwhelm a server and prevent it from serving up web pages, but they do all kinds of nefarious stuff, most of which I don’t understand.

Botnets are increasingly cheap and easy to create with online software kits, so the attacker might be a teenage kid who spent a few hundred bucks on the nasty software to take revenge against a wrong or smother the website of a band he doesn’t like, or a sophisticated service provider who rents out his bots to coordinate attacks against business or other rivals of his customers, or a foreign country or terrorist trying to leverage enough computing firepower to destabilize key systems. With an increasingly connected and internet-dependent world, the types of attacks that might be tried are limited only by your imagination.

That’s not to say that all of these attacks work, of course — and increased security and awareness has arguably helped to cut down somewhat on the numbers of individuals impacted by the low-end stuff or recruited unwillingly into these zombie botnets — but the bad guys are not getting any less sophisticated, and the attention paid to cybersecurity by governments and corporations is likely only to grow as both the attacks and their dependence on their networked computer systems increase.

So what, then, do we do about these botnets that can cause so many problems? Here’s some more of the ad:

“Building the Perfect Shadow War Defense Shield

“The company we’ve been telling you about recently announced a huge breakthrough in Shadow War technology.

“They have finally perfected a kind of ‘electronic umbrella.’ This system can now shield anyone – a person, a government or a corporation – from Shadow War attacks on their critical infrastructure – physical, financial or otherwise.

“This ‘shield’ is a proprietary blend of hardware, software and data collection that will move security from defensive mode to proactive attack mode. And that is a huge step forward considering, up until now, the hackers and cyber terrorists have had the upper hand. Botnets beware.

“It’s an atomic bomb-type advancement in the world of financial cyber security. It could make this company a household name just like great defense contractors of the past like Boeing, Northrup Grumman, Raytheon and others.

“We’re calling this company’s number one defensive weapon the ‘Botnet Shield.’ As I said, we believe it’s a major breakthrough in the Shadow War.

“I believe companies and governments will pay dearly to get their hands on this shield. I know I would.

“But unlike a one-time nuclear blast, the Botnet Shield is a multi-part and ongoing strategy – one that uses constant monitoring and adaptation to stay out in front of the threat.

“And in fact, that’s exactly what makes this company’s potential as an investment so attractive…

“Because as the Shadow War threat is persistent and ever-changing, so is the need for this company’s service.

“In other words, it has built in recurring revenue as it contracts to maintain its Botnet Defense Shield over companies, individuals and even governments.”

OK, so that’s a long-winded way of saying that our teaser pick has developed a new botnet defense. That’s not conclusively specific to any one company just yet, even for the Mighty, Mighty Thinkolator, but we do get just one more handy little clue:

“… one unusual company is in the process of cementing formal contracts with EVERY MEMBER of the Fortune 100. Their new defense system technology is so potent, in fact, that the company already has 98% of the Fortune 500 lined up to buy their product.”

So who are we dealing with here?

Well, this time around we are not, unfortunately, able to give a 100% certain answer — not quite enough clues. But the Thinkolator is spitting out our name and ticker and we’re assigning it a 90% probability of being dead-on. So your friendly neighborhood Stock Gumshoe is pretty sure (call it 90%) that this is Check Point Software (CHKP).

[update: check the comments below — several folks indicate that we’re sniffing up the wrong tree on this one and it’s actually FTNT. Much as we hate errors, we limit self-flagellation as long as the Thinkolator’s success rate remains at 99% or above.]

Check Point is indeed a cybersecurity firm — one of the biggies, with a market cap approaching $10 billion. They’re based in Israel but have a strong US presence, and they’ve been known for their firewall network security software for a long time but did indeed position themselves with a botnet-fighting product that has been evolving over the past year or so. It’s a software solution which they’re calling the “Anti-Bot Blade,” but perhaps the key to it is their ThreatCloud collaborative threat detection network that helps them identify bot traffic and other threats.

And even though I’m sort of in this business — in that Stock Gumshoe is an online endeavor, and I wouldn’t want you to face a day without our bloviating due to some attack or another — I’m afraid I can’t tell you if Check Point’s solution is going to work better than the bot-fighting and security tools from Fortinet (FTNT) or Cisco (CSCO) or Intel (INTC) or SourceFire (FIRE) or Symantec (SYMC). We do get a fair amount of certainty from the fact that although most of these large security companies undoubtedly have at least some business with pretty much everyone in the Fortune 500, Check Point is the only one I’m aware of that specifically boasts about having 98% of that group (and 100% of the Fortune 100) on their customer list.

I can also tell you that CHKP is a lot better at turning revenue into profits than the other pure-play cybersecurity companies I’ve noticed — they have profit margins of over 40%, almost twice as high as any of the other big companies I can think of in this business, partly because they have big recurring software revenues (software is one of the best margin boosting businesses in the world — it doesn’t cost any more to make a million copies of your code than it does to make a hundred). They also sell their services a little differently, it seems, focusing more on a subscription model than on a product licensing model, which might provide a lower-cost solution to start but would result in more revenue over time and a more predictable revenue stream. Of course, profit margins like that create competition pretty much all on their own — so if there’s a major worry with CHKP it’s that the folks who sell the equipment are building in more security capability (so some customers won’t feel the need to boost it with CHKP’s software offering), and CHKP is not the only company innovating in this space so they can certainly lose customers to better or cheaper products.

Will Check Point get a 25X increase in revenue as this “war” continues to heat up over the next decade, as the Oxford Club folks imply? Well, that I can’t tell you — I was a little too sleep this morning, and I drank my tea leaves by mistake. They are inexpensive — not as cheap as Symantec, their large competitor, but still pretty cheap at a forward PE of 13, particularly with their cash level, their high margins, and the expectation that they’ll continue growing earnings at a 12%+ annual clip.

Though if we add a bit of sobriety to the mix, we would also note that Louis Navellier, an unrelated teaser-meister, pitched this stock almost exactly a year ago and “guaranteed” the stock would triple by May, based on pretty much the same exact theme and big picture stuff. And, well, it didn’t — it did peak out around 15% higher for him near that May target date, but came right back down and is now trading a good 15% cheaper than it was a year ago … so you need more than just a good theme.

CHKP is not a company that has been clobbering estimates in recent quarters, they’ve been pretty “steady eddie” on that front, beating analyst estimates by one or two percent, so it’s hard to predict dramatic change for them, but they make a lot of money, their stock is priced fairly, they’re in a hot sector, and they have been growing nicely … sometimes that’s enough. Morningstar, for whatever it’s worth, pegs their fair value at $61 (the shares are around $46 as I type this).

But it’s not their money, of course, it’s yours. So what do you think? Have a reason to believe CHKP will keep on growing and profiting, or do you think competition will be too cutthroat? Have a different cybersecurity favorite? Let us know with a comment below.


I've used MarketClub in the past when thinking about timing entry and exit points, and it's worth trying it to see if it works for you.

They have a free trial right now (they don't even ask for a credit card, this is ACTUALLY free), so now's the time to give it a try.

Claim your free 2-week trial to MarketClub – No credit card required! But hurry, this offer ends Friday, July 13.

Just request access and they’ll send you a username and password right away.

In just a few moments from now, you’ll have access to MarketClub’s powerful scans, signals, charts, alerts, and more.

You’ll need to accept this free trial before this offer expires on Friday.


Share your thoughts...

18 Comments on "“Building the Perfect Shadow War Defense Shield” (Oxford Club)"

Notify of

This site uses Akismet to reduce spam. Learn how your comment data is processed.


I would think that if your right hand creates the threats and your left hand sells the security software to combat the threats that it is a very good business model sort of like what has been going on in the USA since 9-11 in most defense endeavours. Thanks alot bastards.


I believe the company is Fortinet FTNT.

John Harris
Odd that Oxford is recommending CHKP again. They had held it for some time when it dropped early this summer under $44 breaching their sell stop on June 29, 2012 when they emailed a sell alert. It rose again recently up to close to $48 when I finally sold it for a small loss having bought it at $51 a year ago at Navellier’s advice in addition to it being on the Oxford buy list. I am the basic (cheap) Oxford member and have not seen a recent tease from them, nor any formal reco to get back into CHKP.

The biggest buyers of any cyberattack breakthrough would be the Pentagon, which can only buy American, and equivalent agencies in other countries. A US-based equivalent is a better buy because it could be acquired by Lockheed-Martin or whoever.


Although signature-less solutions (behaviour-based) seem to be the up and coming thing, I think this person is actually talking about Cisco’s NetFlow stuff, as they mention h/w and s/w solution.

Terry P

Oxford Club just added Fortnet to their trading portfolio for September…………??

David Fryday

What do you think about guidance Software or Keywave which it is my understanding already has contracts with the government and private companies alike to combat these threats?

david fryday

I forgot to leave a check mark in the box requesting notification on follow up so if anyone in the know, I’d love to hear from you.

Sharon Logue

Out of curiosity, I searched “best cybersecurity companies” and hit upon the CNBC show’s list of the top 14. They list BA,CACI,CSC,DRCO,GD,INTC,KEYW,LMT,MANT,NCI,NOC,SAI,SRX,and SYMC. So, I scanned their graphs, and KEYW showed a significant pop in volume on 9/13.
Evidently, Suntrust upgraded them to a buy on 9/14, They bought a cyber company called “sensage” on Sept 13 to support a “project G” platform. They have significant US GOVT intelligence and defense customers…… sounds mysterious enough to hit the Oxford Club’s radar.


B S reigns


Changing the subject, Retirement Millionaire (a Stansbury publication) is touting “five magic words” that will get you silver from banks! Any info on this?

Paul Harach

This is just a simple idea of walking into your nearest bank and asking for half dollar and one dollar coins; and then going through a pile of them and hoping that some are pure silver based on the vintage. I did get some silver 25 cent coins a few weeks ago, they were 1955 and 1961. Most bank tellers are much more aware of the value of these coins; than the average person who deposits the change from their grandparents coin collections and gets paid face value.


I tried this a month ago … slim pickings … more trouble than it worth !!